Privacy Policy

1. Who We Are

SimplePeek is a website builder for small businesses. This Privacy Policy explains what personal information we collect about you when you use SimplePeek, why we collect it, who we share it with, and the rights you have over it.

This policy applies to the SimplePeek website (simplepeek.com), the dashboard, the editor, and any websites you publish through SimplePeek under our subdomains. It does not apply to third-party websites that link to or from SimplePeek, or to sites your visitors reach after clicking a link on a site you publish.

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password (stored only as a salted bcrypt hash).
• Business profile: business name, tagline, description, services, hours, phone, address, social links, logo, and any other information you enter into the editor or onboarding wizard.
• Site content: text, images, video, and configuration you upload while building or editing your site.
• Payment information: when you subscribe or buy a domain, payment details are collected and stored by Stripe. SimplePeek receives a token reference and the last four digits of your card; we never see or store full card numbers.
• Domain registrant information:if you register a domain through us, we collect the registrant's legal name, postal address, phone, and email as ICANN requires.
• Support communications: messages you send to support, abuse, privacy, or DMCA addresses, and any attachments you include.
• Logs and basic usage data: server logs (IP address, user agent, request path, response status, timestamp), feature interactions, and error reports. These are used for security, debugging, and improving the product.
• Cookies: a session cookie that keeps you logged in. We do not use third-party advertising or tracking cookies.

We do not knowingly collect information from anyone under 18. SimplePeek is not directed to children. If you believe a child has given us personal information, contact us and we will delete it.

3. How We Use It

• To provide, maintain, and improve SimplePeek.
• To authenticate your account and protect against unauthorized access.
• To process subscription and domain payments.
• To send transactional emails: receipts, password resets, trial-ending notices, renewal reminders, billing failures, security notifications.
• To respond to support requests and enforce our Terms and Acceptable Use Policy.
• To detect and prevent fraud, abuse, and security incidents.
• To meet legal obligations and respond to lawful requests.

We do not sell your personal information. We do not use your information for advertising. We do not feed your business or site content into any third-party advertising profile.

4. Subprocessors We Share Data With

SimplePeek runs on a small number of trusted third-party providers. Each one only receives the data it needs to do its job, and each one is contractually required to protect that data.

We may add or change subprocessors as we grow. When we do, we will update this list. If a change materially affects how your data is handled, we will notify subscribers by email at least 30 days before the change takes effect.

5. When We Disclose Information

We disclose personal information outside of SimplePeek only in the following situations:

• To the subprocessors listed above, for the limited purposes described.
• To our domain partner and to ICANN-required escrow and registry providers, when you register a domain through us.
• To respond to a valid legal request (subpoena, court order, government request) where we have a good-faith belief that disclosure is required by law. We will tell you about the request unless we are legally prohibited from doing so.
• To investigate, prevent, or address suspected fraud, security issues, or violations of our Terms or Acceptable Use Policy.
• In connection with a merger, acquisition, financing, or sale of all or part of SimplePeek, in which case we will give notice and ensure the recipient is bound by terms at least as protective as this policy.
• With your direct consent.

6. Site Content You Publish

The sites you publish through SimplePeek are public by design. Anything you put on a published site (text, images, business address, phone number, services) is visible to anyone who visits the site. Treat published-site content as public information.

7. Cookies

SimplePeek uses a small number of cookies, all of them strictly necessary for the service to work:

• Session cookie: keeps you logged in.
• CSRF cookie: protects login and form submissions from cross-site request forgery.
• Editor preferences: remembers your last-used template, color, and view mode in the editor.

We do not use third-party advertising cookies, third-party analytics cookies, or any tracker that follows you across other websites.

8. Data Retention

We keep your account information and site content for as long as your account is active. When you delete your account, we delete or anonymize your data within 30 days, except where we are required to keep records for tax, accounting, fraud-prevention, or legal-defense purposes (typically up to 7 years for billing records). Server logs and aggregated usage data are kept for up to 12 months.

If you register a domain through us, registrant information is retained for as long as the domain is registered, plus any window required by ICANN policy.

9. Your Rights

You have the right to access, correct, export, or delete your personal information. You can update most of your information directly from your account settings. For anything else, including a full copy of your data or account deletion, email privacy@simplepeek.com from the email address on your account. We respond to verified requests within 30 days.

If you are in the EU, the UK, or another jurisdiction with data-protection laws (such as the GDPR or California's CCPA), you have additional rights, including the right to object to certain processing, the right to data portability, and the right to lodge a complaint with your local data- protection authority.

10. International Transfers

SimplePeek is operated from the United States. If you access SimplePeek from outside the United States, your information will be transferred to, stored in, and processed in the United States and other countries where our subprocessors operate. By using SimplePeek you consent to that transfer.

11. Security

We use industry-standard security measures to protect your data, including TLS for data in transit, encryption at rest for the primary database, bcrypt password hashing, scoped access tokens, and isolated tenant data. No system is perfectly secure, so we cannot guarantee absolute security. If we ever experience a breach that affects your data, we will notify you in line with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make a material change, we will notify you by email or by posting a notice on our website at least 30 days before the change takes effect. The “Last updated” date at the top of this page reflects the most recent change.

13. Contact

Privacy questions, requests for access or deletion, and reports of suspected privacy issues: privacy@simplepeek.com. General support: support@simplepeek.com.